Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
File:                     E_OtQPlu1efznY2eGWq_D6I4How.mft (raw, json)
Hash identifier:          KMpEi9ZQgYFkDVGeyHKovZ2JZuIRZfuFCCMzbECHOh0=
Subject key identifier:   39:76:A1:00:D7:9B:B4:B9:CA:21:09:2F:BF:68:D9:27:45:27:0A:38
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Certificate issuer:       /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial:       019E1EDA5AF5D7397B180F53178D421ADC80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
Manifest number:          144C
Signing time:             Wed 13 May 2026 01:01:27 +0000
Manifest this update:     Wed 13 May 2026 01:01:27 +0000
Manifest next update:     Thu 14 May 2026 01:01:27 +0000
Files and hashes:         1: E_OtQPlu1efznY2eGWq_D6I4How.crl (hash: ioNu1Gp1DsLziULt1n8FR98M0yak2rq8Yb2GrTZA06c=)
                          2: _BiThTGjxk4mTLq-x93nIMvlUFM.roa (hash: eb4KvoDqDMfsY+rM/WfNgq/w+lmr8scY27yz0mI6HFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:5a:f5:d7:39:7b:18:0f:53:17:8d:42:1a:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
        Validity
            Not Before: May 13 01:01:27 2026 GMT
            Not After : May 14 01:01:27 2026 GMT
        Subject: CN=3976a100d79bb4b9ca21092fbf68d92745270a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:e2:34:d8:bb:54:af:aa:e1:7a:74:76:cc:
                    6a:cb:da:b3:72:7f:cc:61:14:18:c1:73:75:61:9c:
                    c4:fd:ce:64:ff:3d:5a:fe:e4:88:12:61:0b:bd:da:
                    d5:57:b5:99:97:47:d8:6e:af:d7:2f:b1:c4:13:b0:
                    06:96:a6:a8:4e:59:71:2e:59:92:4b:30:8d:b6:2b:
                    a5:23:bc:35:73:f8:61:f7:1b:77:31:00:f8:71:c3:
                    0d:e9:86:5a:20:80:87:f8:e5:6c:fe:42:55:69:85:
                    a3:65:33:a7:e6:df:b8:34:04:26:03:de:b9:b5:9c:
                    b2:94:40:d1:c1:77:82:b4:f2:5c:d3:b8:fc:b1:d5:
                    52:7c:0b:e4:18:dd:91:33:95:9b:6e:16:53:9f:79:
                    c0:3f:4d:ce:68:14:c2:62:f9:96:de:12:2b:64:03:
                    1d:ea:0a:26:c3:b2:6d:bb:dd:74:ae:d9:3b:46:0c:
                    68:2b:c5:54:ad:8c:65:73:4c:ae:7b:d5:85:f2:ce:
                    5f:ae:ff:49:9b:df:a8:ff:f6:00:dc:c0:fc:a9:b2:
                    d8:cc:28:1d:f2:50:68:b2:8b:c4:c1:98:8b:25:7f:
                    ad:43:d9:4d:ce:eb:e2:56:db:dd:9e:56:bc:7e:ad:
                    5f:03:e8:33:42:38:3d:65:13:72:bc:4b:88:1b:7e:
                    eb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:76:A1:00:D7:9B:B4:B9:CA:21:09:2F:BF:68:D9:27:45:27:0A:38
            X509v3 Authority Key Identifier:
                keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:54:c8:13:ad:0a:7e:c6:dd:0f:4b:d4:48:8b:a3:47:66:4d:
         a0:e2:99:88:92:f5:01:47:b4:9a:4b:29:d7:29:1d:de:6c:4d:
         a1:ef:28:c4:8d:80:b1:40:1c:c9:bf:92:06:eb:e3:d7:c2:70:
         b9:d1:2c:e7:96:84:65:59:5b:88:5d:93:8a:4b:49:49:1c:91:
         95:4e:d8:20:f7:81:41:55:93:90:64:d0:9f:17:76:0a:3c:ef:
         c4:0f:24:12:63:c9:e5:36:75:ab:0c:94:39:33:4b:e2:9a:70:
         8d:81:cd:92:36:ff:85:4a:69:95:73:a6:25:d7:91:2a:8d:08:
         53:ff:df:bd:f2:e7:95:35:01:dc:dc:5d:10:c8:f1:31:88:bb:
         af:78:d5:9a:13:1b:34:d4:8e:1c:00:06:fc:29:f6:e8:c0:82:
         f0:a4:fd:84:05:46:1d:a1:27:59:ba:21:e5:30:9b:9b:52:e5:
         aa:a9:c9:9f:d2:7f:08:dd:c9:95:7e:41:25:df:ea:1a:2b:1c:
         94:95:1b:48:e7:75:16:2f:4d:4e:a5:08:d9:af:b4:70:1b:fd:
         7d:82:b5:ab:72:12:2b:38:88:23:03:b4:ab:c6:8c:a6:ee:74:
         89:43:86:28:59:20:2d:84:ad:2e:fe:9f:91:ad:28:4b:94:d8:
         b0:6b:5a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:59:31 2026 by rpki-client